Storm-0473

Reports per quarter

CVEs named in reports

• CVE-2022-42475 KEV ransomware
• CVE-2022-47966 KEV ransomware
• CVE-2023-38831 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   Crimson RAT (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Crimson RAT (Malware Family)

2. 6 April 2026

   Meterpreter (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Meterpreter (Malware Family)

3. 6 April 2026

   GoldMax (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor GoldMax (Malware Family)

4. 6 April 2026

   Andromeda (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Andromeda (Malware Family)

5. 29 September 2021

   DarkHalo after SolarWinds- the Tomiris connection (UNC2849)

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor DarkHalo after SolarWinds- the Tomiris connection (UNC2849)

Newest first. Details opens the report in Explore.